// Arrange
        int access = 1;
        int rid = 100;

        // Mock the behavior of sendrecv for MsrpcSamrOpenAlias
        doAnswer(invocation -> {
            MsrpcSamrOpenAlias rpc = invocation.getArgument(0);
            rpc.retval = 0; // Simulate success
            return null;
        }).when(mockDcerpcHandle).sendrecv(any(MsrpcSamrOpenAlias.class));

        // Act

            throws IOException {
        this.handle = handle;
        final MsrpcSamrOpenDomain rpc = new MsrpcSamrOpenDomain(policyHandle, access, sid, this);
        handle.sendrecv(rpc);
        if (rpc.retval != 0) {
            throw new SmbException(rpc.retval, false);
        }
        this.opened = true;
    }

    @Override

     *
     * @throws SmbException if the SID string is invalid
     */
    @Test
    void testGetDomainSid() throws SmbException {
        // Create a mock RPC SID to simulate a user SID
        rpc.sid_t rpcSid = new rpc.sid_t();
        rpcSid.revision = 1;
        rpcSid.sub_authority_count = 5; // Fixed: should be 5 for domain SID with RID
        rpcSid.identifier_authority = new byte[] { 0, 0, 0, 0, 0, 5 };

                    rpc = new MsrpcGetMembersInAlias(aliasHandle, sidarray);
                    handle.sendrecv(rpc);
                    if (rpc.retval != 0) {
                        throw new SmbException(rpc.retval, false);
                    }
                    final SID[] sids = new SID[rpc.sids.num_sids];

                    final String origin_server = handle.getServer();

	// `jwt:groups` works.
	if grpsVal, ok := claims["groups"]; ok {
		if grpsIs, ok := grpsVal.([]any); ok {
			grps := []string{}
			for _, gI := range grpsIs {
				if g, ok := gI.(string); ok {
					grps = append(grps, g)
				}
			}
			if len(grps) > 0 {
				args["groups"] = grps
			}
		}
	}

	// if not claim groups are available use the one with auth.Credentials

            throws IOException {
        this.handle = handle;
        final MsrpcSamrOpenAlias rpc = new MsrpcSamrOpenAlias(domainHandle, access, rid, this);
        handle.sendrecv(rpc);
        if (rpc.retval != 0) {
            throw new SmbException(rpc.retval, false);
        }
        this.opened = true;
    }

    @Override
    public synchronized void close() throws IOException {

        this.handle = handle;
        final MsrpcSamrOpenAlias rpc = new MsrpcSamrOpenAlias(domainHandle, access, rid, this);
        handle.sendrecv(rpc);
        if (rpc.retval != 0) {
            throw new SmbException(rpc.retval, false);
        }
    }

    /**
     * Closes this SAM alias handle.
     *
     * @throws IOException if an I/O error occurs during handle closure
     */

        this.handle = handle;
        if (server == null) {
            server = "\\\\";
        }
        final MsrpcLsarOpenPolicy2 rpc = new MsrpcLsarOpenPolicy2(server, access, this);
        handle.sendrecv(rpc);
        if (rpc.retval != 0) {
            throw new SmbException(rpc.retval, false);
        }
        this.opened = true;
    }

    @Override
    public synchronized void close() throws IOException {

        lsarpc.LsarDnsDomainInfo dnsDomainInfo = new lsarpc.LsarDnsDomainInfo();
        dnsDomainInfo.name = new rpc.unicode_string();
        dnsDomainInfo.dns_domain = new rpc.unicode_string();
        dnsDomainInfo.dns_forest = new rpc.unicode_string();
        dnsDomainInfo.domain_guid = new rpc.uuid_t();
        dnsDomainInfo.sid = mock(rpc.sid_t.class);

        when(mockNdrBuffer.dec_ndr_short()).thenReturn(10, 20, 12, 24, 14, 28);

        // Arrange
        int access = 0x01; // Example access value
        // Simulate successful RPC call
        doAnswer(invocation -> {
            MsrpcSamrOpenDomain rpc = invocation.getArgument(0);
            rpc.retval = 0; // Success
            return null;
        }).when(mockDcerpcHandle).sendrecv(any(MsrpcSamrOpenDomain.class));

        // Act